Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: Ol8DV+DPExkFyV3rTmMFHkqmtKWzk9Bg8knrnLNGY8A=
Subject key identifier: 2B:C3:B1:6A:10:FC:C1:C4:87:8C:0F:D9:D3:65:87:F8:72:AD:95:E0
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 01977150F7CF40B8CE558008C6BB7C7994C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 029B
Signing time: Sun 15 Jun 2025 02:00:21 +0000
Manifest this update: Sun 15 Jun 2025 02:00:21 +0000
Manifest next update: Mon 16 Jun 2025 02:00:21 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: vm55vQF9ojwi4a5vpDrtw9rg6od379osSzNwnItugyg=)
2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=)
3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=)
4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:f7:cf:40:b8:ce:55:80:08:c6:bb:7c:79:94:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Jun 15 02:00:21 2025 GMT
Not After : Jun 16 02:00:21 2025 GMT
Subject: CN=2bc3b16a10fcc1c4878c0fd9d36587f872ad95e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:d4:20:55:31:a1:3f:2b:f5:36:5a:78:f5:
98:e9:9f:b6:02:ec:57:91:b7:f5:70:0c:3a:b0:d5:
81:be:26:75:fc:ce:3e:d7:97:e1:b6:85:ab:fd:bd:
2a:dd:e2:4c:ee:d1:2a:23:aa:c1:ca:47:ea:7d:bd:
7f:a5:88:e9:a9:81:a3:30:9b:9d:96:53:f4:e1:cf:
70:c3:d0:dd:88:82:a1:2a:57:2b:9f:e4:44:73:83:
22:47:c9:7f:b6:27:b5:2b:86:92:3f:5a:90:a7:6c:
0b:83:5b:d0:2e:3b:cd:3d:2b:7e:50:dc:81:44:de:
53:7c:9a:69:1f:47:94:59:a3:01:ee:39:3a:b7:8b:
d1:d2:e0:67:2f:e8:13:7c:1e:ca:78:93:dc:96:20:
66:ea:f9:ff:f1:54:ad:73:fe:49:86:9c:10:24:db:
3c:20:1f:0f:df:7f:06:a9:ef:b1:e1:98:c5:43:d6:
cc:0f:04:24:3d:e6:1e:4d:fe:aa:25:b2:66:5b:74:
c0:37:e9:9d:a3:4b:d3:78:1a:03:3f:cd:83:8b:22:
7e:f7:ca:0a:6a:15:fe:e2:b6:f9:c9:44:6c:50:94:
d9:4e:48:f9:96:48:69:f5:a5:6d:16:26:e2:a5:c0:
a6:f7:58:82:00:39:7e:14:f8:41:8e:c3:1a:4c:84:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:B1:6A:10:FC:C1:C4:87:8C:0F:D9:D3:65:87:F8:72:AD:95:E0
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0d:a3:d7:b5:a0:db:1a:00:de:c7:fd:b6:18:d3:92:da:8f:
25:e0:e4:b7:90:27:9b:6f:0f:1e:5c:12:8a:b5:ec:66:8c:e7:
f0:e7:40:07:f7:88:36:6c:1c:2a:f4:88:9f:51:f9:ae:be:02:
94:72:59:26:99:a3:a6:fb:ad:39:56:ad:57:ec:05:ce:6b:4d:
ab:05:e0:81:3f:7a:b1:a7:0f:d6:9c:a8:f5:61:90:53:f7:0f:
d7:84:e3:f0:d3:55:2f:4b:c3:73:94:4f:9f:54:31:7b:cc:12:
82:19:db:53:1a:70:0b:71:a4:6e:2b:72:68:29:e6:d5:c4:81:
e8:5b:9e:e8:d0:6e:03:cb:97:2a:7d:95:1b:5c:77:b6:4b:e7:
ae:52:d6:37:b4:44:a2:cd:99:1d:c7:7f:51:61:b0:3d:12:da:
cd:1a:7a:bd:95:b9:59:37:08:da:db:51:3a:85:ba:52:3c:25:
61:ea:3e:97:b1:64:d8:16:a6:07:de:de:92:65:41:29:03:a4:
ea:61:d4:26:90:76:71:4c:65:f9:9e:72:67:1c:31:7d:91:94:
04:4f:a1:aa:02:15:a3:60:dc:30:f0:39:02:d0:ad:d6:b9:4d:
80:60:6a:b4:bf:d1:dd:9a:f9:34:41:f3:52:d9:ca:17:70:4a:
75:55:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:27:41 2025 by rpki-client